<a href="javascript:alert(\'ok\')">Dangerous</a><span>Safe</span>
<img src="https://untrusted.com" />
<img src="https://trusted.com" />
